Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File:                     3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier:          CEFoyXq0jqrowi8DTzJKbPcIIwmgSFP9A5N9AK0PGAE=
Subject key identifier:   63:C4:71:3D:6C:82:F2:11:F4:73:0A:E8:BE:C1:83:87:E1:45:A7:1B
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer:       /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial:       01962F0676FF94BCB7159EC904DC6A2F8016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number:          0E9E
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: D6e+nw+3N4x/YRCQv79QpDGcYpgn1J37cqKS70EmXXI=)
                          2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:76:ff:94:bc:b7:15:9e:c9:04:dc:6a:2f:80:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=63c4713d6c82f211f4730ae8bec18387e145a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:53:5e:75:8b:b1:b2:87:4f:4e:59:ef:1e:
                    39:23:8a:23:b8:61:3c:ce:80:36:a0:a6:5b:19:a1:
                    5e:99:59:6c:72:49:37:52:b0:f7:ef:81:8c:a1:05:
                    78:49:33:99:8a:b9:68:06:04:55:9f:b3:1e:2d:9e:
                    34:80:45:1e:fc:c0:04:b6:97:b6:c2:3a:b3:64:9b:
                    2d:b5:e0:2a:a0:36:02:e9:1e:d9:be:8c:46:6a:a3:
                    bc:d9:3a:95:a6:fe:be:bb:7f:73:9a:21:02:7c:b9:
                    97:99:80:39:a7:94:13:5f:dc:d7:5f:36:01:71:f6:
                    d7:36:01:76:8c:c9:40:ab:32:0d:c8:12:dd:6d:26:
                    a7:9a:15:c7:32:99:8f:15:46:2d:85:45:a7:2e:04:
                    6c:ba:2c:c5:e3:9c:d1:46:60:ca:c5:d6:5a:26:56:
                    b7:7a:b0:6f:f5:60:61:9c:32:cd:a4:3b:01:07:40:
                    56:5a:ee:ec:f6:7b:18:2d:ff:06:24:25:5e:ac:f9:
                    3f:64:2c:24:f5:0c:89:9b:65:e2:81:c7:88:b2:37:
                    75:76:8b:60:aa:ac:ba:19:09:2c:93:b8:ee:60:a0:
                    c4:e8:8d:2f:ba:75:53:64:07:43:0d:39:f5:a5:e1:
                    30:54:e6:1b:f2:8f:ab:9e:11:72:be:c5:c4:22:c9:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:71:3D:6C:82:F2:11:F4:73:0A:E8:BE:C1:83:87:E1:45:A7:1B
            X509v3 Authority Key Identifier:
                keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:d1:11:36:3f:62:be:41:98:b1:81:3d:3f:d5:59:ac:71:
         22:21:31:61:d6:c4:80:0d:24:77:d4:8c:07:fb:dc:cd:98:12:
         0f:ca:a6:a2:7e:6b:23:71:06:c6:12:6b:9e:2b:af:69:26:99:
         9e:86:a8:17:e4:b2:fa:59:bd:a4:14:b4:21:80:04:fa:10:10:
         dc:77:ce:74:04:d7:82:25:dc:76:f4:d7:9d:9d:2f:3e:a3:1d:
         c9:c4:9c:8d:0d:ca:d4:b8:22:36:7f:95:97:5b:e0:e3:16:c1:
         81:d9:33:a0:ad:3d:e8:99:69:e9:ab:35:ce:a4:96:3d:2b:a5:
         60:d9:a1:6b:fe:31:69:4f:1e:8c:74:ce:69:38:c4:21:0e:ae:
         c6:5d:8d:75:b9:29:0d:f2:35:8d:32:ff:9c:bb:66:a6:77:d6:
         6d:64:80:a4:1f:b4:ce:f3:32:52:77:41:0b:95:f8:4c:d8:67:
         c4:2d:ad:5c:b8:79:6f:cf:1a:27:b9:43:1f:a4:4c:ab:a6:dd:
         0a:8d:b2:68:51:d6:3e:48:61:eb:04:b8:f3:5b:65:52:52:b9:
         dd:e4:c1:d0:c2:82:7a:ec:f7:e6:c3:b0:5c:ef:3b:65:2e:76:
         94:15:f2:1b:36:44:76:e0:d7:23:02:32:62:61:c7:6c:07:74:
         05:9f:47:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnb/lLy3FZ7JBNxqL4AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjUwNDEzMTIwMTE0WhcNMjUwNDE0MTIwMTE0WjAzMTEwLwYDVQQD
Eyg2M2M0NzEzZDZjODJmMjExZjQ3MzBhZThiZWMxODM4N2UxNDVhNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TdTXnWLsbKHT05Z7x45I4ojuGE8
zoA2oKZbGaFemVlsckk3UrD374GMoQV4STOZirloBgRVn7MeLZ40gEUe/MAEtpe2
wjqzZJstteAqoDYC6R7ZvoxGaqO82TqVpv6+u39zmiECfLmXmYA5p5QTX9zXXzYB
cfbXNgF2jMlAqzINyBLdbSanmhXHMpmPFUYthUWnLgRsuizF45zRRmDKxdZaJla3
erBv9WBhnDLNpDsBB0BWWu7s9nsYLf8GJCVerPk/ZCwk9QyJm2XigceIsjd1dotg
qqy6GQksk7juYKDE6I0vunVTZAdDDTn1peEwVOYb8o+rnhFyvsXEIsnuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPEcT1sgvIR9HMK6L7Bg4fhRacbMB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrjRETY/
Yr5BmLGBPT/VWaxxIiExYdbEgA0kd9SMB/vczZgSD8qmon5rI3EGxhJrniuvaSaZ
noaoF+Sy+lm9pBS0IYAE+hAQ3HfOdATXgiXcdvTXnZ0vPqMdycScjQ3K1LgiNn+V
l1vg4xbBgdkzoK096Jlp6as1zqSWPSulYNmha/4xaU8ejHTOaTjEIQ6uxl2Ndbkp
DfI1jTL/nLtmpnfWbWSApB+0zvMyUndBC5X4TNhnxC2tXLh5b88aJ7lDH6RMq6bd
Co2yaFHWPkhh6wS481tlUlK53eTB0MKCeuz35sOwXO87ZS52lBXyGzZEduDXIwIy
YmHHbAd0BZ9HIA==
-----END CERTIFICATE-----